MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...

CVE-2025-56224

CVE-2025-56224 OTP verification Bypass Description an attacker can impersonate another user mobile number and use this vulnerability to verify the number without knowing the OTP code. CVSS Score: 8.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yaza...

CVE-2026-87517

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.801...

CVE-2026-87545

Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 Unauthenticated Mobile MCP access can expose Android screen data and provide remote UI-control capabilities through ADB. ⚠️ Security Notice This repository is intended for authorized security research, vulnerability validation, defensive testing, and controlled...

droidground v1.0.15

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

sigcorr

SigCorr Passive Cross-Protocol Attack Detection for Mobile Core Networks SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber identity correlation. Features Cross-protocol correlation — Links SS7/MAP,...

CVE-2019-6447-in-Mobile-Application

CVE-2019-6447-in-Mobile-Application In this research report you can get completly idea about the CVE 2019-6447 in the real world application and explotations with example. If you want to created video for the exploitation please use below mentions link...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 可能允许攻击者在 Check Point 安全网关连接到互联网并启用远程访问 VPN 或移动访问软件刀片后读取某些信息。已提供缓解此漏洞的安全修复。 第一： 我对您使用本工具造成的后果不承担任何责任。 第二： apt-get install parallel curl -y chmod +x SCAN-CVE-2024-24919.sh CVE-2024-24919.sh SCAN-CVE-2024-24919.sh： 用于扫描目标列表，默认插入目标的文件是“targets”，使用“nano targets”。...

CVE-2024-24919---Poc

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read about it - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. Description Potentially allowing an...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC Alert Analysis: Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Introduction CVE-2024-24919 is a critical zero-day vulnerability in Check Point Security Gateways that allows unauthenticated remote attackers to read arbitrary files from affected systems. Discovered in May 202...

CVE-2026-49918

creationtimestamp| type| source ---|---|--- 2026-09-09 04:48:26+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-49895

creationtimestamp| type| source ---|---|--- 2026-09-09 04:48:18+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21085

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2026-28620

creationtimestamp| type| source ---|---|--- 2026-09-09 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-87595

A flaw was found in Google Chrome. A server-side request forgery SSRF vulnerability exists in the mobile version of Google Chrome. A remote attacker, leveraging social engineering, could exploit this flaw by enticing a user to visit a specially crafted HTML page. This could allow the attacker to...

CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-87517

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74446

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87595

CVE-2026-87595 is a server-side request forgery (SSRF) vulnerability in Google Chrome for Mobile prior to version 153.0.8010.36 . A remote attacker can exploit it by leveraging social engineering to entice a user into visiting a specially crafted HTML page , potentially allowing the attacker to b...